toolness / security-adventure

Go on an educational Web security adventure!
335 stars 26 forks source link

Any help guides? #8

Closed codemzy closed 8 years ago

codemzy commented 8 years ago

Hey, trying to work my way through the security adventure. On challenge 1 - Vulnerability: Regular Expression Denial of Service - the link tells you about the problem. I have figured out how to get the app to hang. No idea how to fix it though.

Done some googling but short of a timeout I can't figure out how you are supposed to fix this issue. It would be good to have some tips on the direction expected.

Like learnyounode has some pointers for each exercise. Love the idea of this repo, just as a beginner to app security could do with some guidance on this one.

codemzy commented 8 years ago

So I did solve this... I don't know if its the best way though... I checked for any invalid characters rather than checking all characters are valid. It passes the tests anyway. But it would be good to get like a 'model answer' or 'possible solutions' when you pass, like with learnyounode and levelmeup. I guess this is more a feature request than anything else! Thanks for the repo. =)